cb4dd803ca9695d1b4f31634d8f3d337024b9986ddcd8880cd17016416b21794 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb4dd803ca9695d1b4f31634d8f3d337024b9986ddcd8880cd17016416b21794
Size

140KB
MD5

af6d953e4869e9469ec8b414b5b6bd11
SHA1

e37abfdfea98f07de63fad24c49cb1105641c320
SHA256

cb4dd803ca9695d1b4f31634d8f3d337024b9986ddcd8880cd17016416b21794
SHA512

4380da4ba23c2065aef6109fd43b2cdee9350033d3829234e28cb9816cdf32121e50779ac14cbe04b087438558e4e0b977c1f0038345b63c54a641efc50bfc6b
SSDEEP

3072:LJ9WclSbOCCJ5Pex8rtMEG2dOMDVdTtUO0sJm6LH9mGxdkPNj+HUtGQ9pj94rL+6:gktR0j6T7vS+H7Ej9zciPA

Score

N/A

Malware Config

Signatures

Files

cb4dd803ca9695d1b4f31634d8f3d337024b9986ddcd8880cd17016416b21794
.exe windows x86

dbdb0525986cb60465f8680544bd9d66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
Sleep
HeapAlloc
GetProcessHeap
CloseHandle
ReadFile
SetFilePointer
CreateFileA
ExitProcess
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE